This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/l_JTrDcsGivAKV47IA0MU-LY3-s.roa File: l_JTrDcsGivAKV47IA0MU-LY3-s.roa (raw, json) Hash identifier: fJFedkJWiTy36a6wHwmDpftvwiJNe4RqkgEep1LXVB4= Subject key identifier: 97:F2:53:AC:37:2C:1A:2B:C0:29:5E:3B:20:0D:0C:53:E2:D8:DF:EB Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5CFC0FA84335543E899D149EC09FFF Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/l_JTrDcsGivAKV47IA0MU-LY3-s.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12912 IP address blocks: 78.133.128.0/17 maxlen: 17 85.219.128.0/17 maxlen: 17 89.174.0.0/16 maxlen: 16 94.42.0.0/16 maxlen: 16 94.42.175.0/24 maxlen: 24 157.25.0.0/16 maxlen: 16 195.94.192.0/19 maxlen: 19 217.8.160.0/19 maxlen: 19 217.153.0.0/16 maxlen: 16 2001:4190::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fc:0f:a8:43:35:54:3e:89:9d:14:9e:c0:9f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97f253ac372c1a2bc0295e3b200d0c53e2d8dfeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:33:b2:df:90:2f:09:67:4b:77:79:76:b2:9d: 29:9d:27:03:a0:44:6d:c0:70:67:89:b5:45:29:fd: d2:36:9a:a6:c7:7a:37:98:05:17:04:e4:93:76:52: ae:31:89:44:f6:f6:b3:57:38:31:b1:3c:83:cc:90: 2e:0d:fb:4f:b0:2d:8f:ee:78:7e:ee:14:a4:1b:e1: 6c:77:64:b1:20:f6:48:44:e4:9d:e9:86:40:aa:a9: cd:f9:6f:77:5a:41:a0:51:1a:52:e1:43:ba:e4:ab: c0:5e:5f:c6:0b:e3:87:b2:1d:ab:27:48:4b:28:21: 14:3a:4a:0f:c9:5d:55:c2:f8:9d:b0:8a:0b:73:32: 1a:1d:5c:c7:7f:a0:a8:0d:1f:2f:17:46:7d:f4:09: 24:83:95:16:69:b1:16:b4:2b:d0:c3:78:65:19:3f: 83:fd:cc:ca:6f:14:fb:d2:b7:e4:b9:83:c3:7a:f1: c9:c7:98:ea:11:f7:9c:cc:07:7c:9d:6e:89:cd:92: e3:41:ee:7c:09:ec:2b:6d:7b:23:81:38:dc:00:06: 85:34:15:33:ad:dc:13:72:e5:31:20:d2:2f:f7:38: f3:66:01:a5:69:cc:06:25:f5:11:c6:04:ed:3d:5c: 95:21:e1:87:2a:c1:fb:60:e2:09:67:fb:f4:09:eb: 52:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F2:53:AC:37:2C:1A:2B:C0:29:5E:3B:20:0D:0C:53:E2:D8:DF:EB X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/l_JTrDcsGivAKV47IA0MU-LY3-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.133.128.0/17 85.219.128.0/17 89.174.0.0/16 94.42.0.0/16 157.25.0.0/16 195.94.192.0/19 217.8.160.0/19 217.153.0.0/16 IPv6: 2001:4190::/32 Signature Algorithm: sha256WithRSAEncryption 38:1f:d7:0b:43:b6:9b:76:c1:73:05:f0:a4:13:d5:18:37:1a: bd:24:b7:39:bd:0c:62:7e:a2:79:bb:86:94:14:22:9f:fd:29: d5:0c:bc:10:72:80:69:52:95:f3:0c:e8:ca:34:10:99:c3:c0: cd:c4:e4:0a:ce:fc:be:e5:8c:f0:33:2a:99:3d:60:a5:e6:b9: 7a:5f:91:e4:f5:a8:ac:c7:96:52:6a:d0:60:01:65:09:63:84: 10:10:a2:92:47:e7:d1:e5:da:47:cf:8c:74:75:00:d0:2e:70: eb:28:44:6a:00:7c:0f:77:eb:1a:ae:18:53:34:7d:cf:1b:3f: d9:a0:80:ad:94:31:48:e7:06:6c:0b:dc:f6:5c:2c:83:d3:82: ab:56:f4:2d:4d:5b:07:93:ef:70:69:20:a2:0f:35:f8:34:7b: 19:25:d1:b2:4c:01:ac:75:64:ae:66:84:e6:14:10:13:5b:ed: a4:87:1d:9e:77:4f:7e:3a:48:0b:c9:da:6e:09:44:d1:04:58: 21:74:11:fc:c2:76:dc:70:e3:71:65:15:7b:2d:fb:ce:12:b5: 30:6c:d9:8d:7c:3d:9d:4f:c5:d6:40:84:7b:10:5e:c0:96:9d: fe:55:60:47:86:6b:92:ed:1c:d1:35:c6:98:cc:22:8d:64:c5: a3:f3:27:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZt9XPwPqEM1VD6JnRSewJ//MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2YyNTNhYzM3MmMxYTJiYzAyOTVlM2IyMDBkMGM1M2UyZDhkZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jOy35AvCWdLd3l2sp0pnScDoERt wHBnibVFKf3SNpqmx3o3mAUXBOSTdlKuMYlE9vazVzgxsTyDzJAuDftPsC2P7nh+ 7hSkG+Fsd2SxIPZIROSd6YZAqqnN+W93WkGgURpS4UO65KvAXl/GC+OHsh2rJ0hL KCEUOkoPyV1VwvidsIoLczIaHVzHf6CoDR8vF0Z99Akkg5UWabEWtCvQw3hlGT+D /czKbxT70rfkuYPDevHJx5jqEfeczAd8nW6JzZLjQe58CewrbXsjgTjcAAaFNBUz rdwTcuUxINIv9zjzZgGlacwGJfURxgTtPVyVIeGHKsH7YOIJZ/v0CetSiQIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFJfyU6w3LBorwCleOyANDFPi2N/rMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvbF9KVHJEY3NHaXZBS1Y0N0lBME1VLUxZMy1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQHToWAAwQH VduAAwMAWa4DAwBeKgMDAJ0ZAwQFw17AAwQF2QigAwMA2ZkwDQQCAAIwBwMFACAB QZAwDQYJKoZIhvcNAQELBQADggEBADgf1wtDtpt2wXMF8KQT1Rg3Gr0ktzm9DGJ+ onm7hpQUIp/9KdUMvBBygGlSlfMM6Mo0EJnDwM3E5ArO/L7ljPAzKpk9YKXmuXpf keT1qKzHllJq0GABZQljhBAQopJH59Hl2kfPjHR1ANAucOsoRGoAfA936xquGFM0 fc8bP9mggK2UMUjnBmwL3PZcLIPTgqtW9C1NWweT73BpIKIPNfg0exkl0bJMAax1 ZK5mhOYUEBNb7aSHHZ53T346SAvJ2m4JRNEEWCF0EfzCdtxw43FlFXst+84StTBs 2Y18PZ1PxdZAhHsQXsCWnf5VYEeGa5LtHNE1xpjMIo1kxaPzJ2E= -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:46 2026 by rpki-client